CLAIMS 

1. A method for verification of a system design 
represented by a model . that includes a plurality of 
variables, the method comprising: 

5 arranging the variables in an Ordered Binary 

Decision Diagram (OBDD) according to an initial order of 
the variables, the OBDD comprising a number of nodes 
arranged in rows corresponding respectively to the 
plurality of the variables; 

10 assigning to each processor, among a group of two or 

more computer processors, a respective variable among the 
plurality of the variables; 

using each processor, reordering the rows of the 
OBDD by varying a position in the OBDD of one of the 

15 rows, which corresponds to the respective variable that 
is assigned to the processor, until at least one of the 
processors identifies a hew order for the OBDD; and 

using the new order of the OBDD, verifying a 
characteristic of the model against a specification. 

20 

2. The method according to claim 1, wherein reordering 
the rows comprises, using each processor, finding the new 
order such that the number of the nodes in the OBDD is 
reduced relative to the initial order. 

25 

3. The method according to claim 2, wherein reordering 
the rows comprises receiving first and second new orders, 
respectively, from first and second processors among the 
two or more computer processors, and selecting the new 
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order from among the first and second new orders so as to 
minimize the number of the nodes in the OBDD. 



4. The method according to claim 1, wherein reordering 
5 the rows comprises operating simultaneously with at least 

two of the processors on a common set of the rows. 

5. The method according to claim 4, wherein operating 
simultaneously comprises operating on substantially all 

10 the rows of the OBDD using all of the at least two of the 
processors . 

6. The method according to claim 1, wherein reordering 
the rows comprises sifting the rows of the OBDD. 

15 

7. The method according to claim 1, and comprising 
replacing .the initial order with the new order, and 
repeating the. steps of assigning the respective variable 
and reordering the rows based on the new order until a 

20 predefined reordering criterion is satisfied. 

8. The method according to claim 7, wherein the 
reordering criterion determines a maximum number of the 
nodes in the BDD. 

25 

9. The method according to claim 7, wherein the two or 

more computer processors comprise first and second 

processors, and wherein reordering the rows comprises 
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receiving the new order from the first processor, and 
wherein replacing the initial order comprises 
communicating the new order to the second processor for 
use in repeating the step of reordering the rows. 

5 

10. The method according to claim 9, wherein reordering 
the rows comprises receiving first and second new orders, 
respectively, from the first and second processors, and 
selecting the first new order according to a predefined 

10 selection criterion. 

11. The method according to claim 7, wherein verifying 
the characteristic comprises operating on the OBDD using 
the group of computer processors while saving data 

15 regarding the OBDD in a memory until a predetermined 
amount of space in the memory has been consumed, and 
wherein repeating the steps of assigning the respective 
variable and reordering the rows comprises repeating the 
steps after operating on the OBDD to verify the 

20 characteristic so as to reduce the amount of space 
occupied by the OBDD in the memory. 

12. The method according to claim 1, wherein verifying 
the characteristic comprises applying a symbolic model 

25 checker to verify the model against the specification. 

13. Apparatus for verification of a system design 
represented by a model that includes a plurality of 
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variables, the apparatus comprising a master processor 
and one or more slave processors, 

wherein the master processor is arranged to receive 
an Ordered Binary Decision Diagram (OBDD) representing 
5 the model according to an initial order of the variables,, 
the OBDD. comprising a number of nodes arranged in rows 
corresponding respectively to the plurality of the 
variables, and to assign to each of the one or more slave 
processors a respective variable among the plurality of 

10 the variables, and 

wherein each slave processor is arranged to reorder 
the rows of the OBDD by varying a position in the OBDD of 
one of the rows, which corresponds to the respective 
variable that is assigned to the slave processor, until 

15 at least one of the slave processors identifies a new 
order for the OBDD, and 

wherein at least one of the master and slave 
processors is further arranged to verify a characteristic 
of the model against a specification using the new order 

20 of the OBDD. ■ 

14. The apparatus according to claim 13, wherein each of 
the slave processors is arranged to find the new order 
such that the number of the nodes in the OBDD is reduced 

25 relative to the initial order. 

15. The apparatus according to claim 14, wherein the one 
or more slave processors comprise first and second slave 
processors,, and wherein the master processor is arranged 

30 to receive first and second new orders, respectively, 
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from the first and second slave processors and to select 
the new order from among the first and second new orders 
so as to minimize the number of the nodes in the OBDD. 

5 16. The apparatus according to claim 13, wherein the 
slave processors are arranged so that at least two of the 
slave processors reorder the rows by operating 
simultaneously on a common set of the rows. 

10 17. The apparatus according to claim 16, wherein the at 
least two of the slave processors are arranged to operate 
simultaneously on substantially all the rows of the OBDD. 

18. The apparatus according to claim 13, wherein the 
15 slave processors, are arranged to reorder the rows by 

sifting the rows of the OBDD. ... 

19. The apparatus according to claim 13, wherein the 
master processor is arranged to replace the initial order 

20 with the new order, and repeat assigning a new ' respective 
variable to each of the one or more slave processors, so 
as to cause the slave processors to repeat reordering the 
rows based on the new order until a predefined reordering 
criterion is satisfied. 

20. The apparatus according to claim 19, wherein the 
reordering criterion determines a maximum number of the 
nodes in the BDD. 
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21. The apparatus according to claim 19, wherein the one 
or more slave processors comprise first and second slave 
processors, and wherein the master processor is arranged 

5 to receive the new order from the first processor, and to 
communicate the new order to the second processor for use 
in repeating the reordering of the rows. 

22. The apparatus according to claim 21, wherein the 
10 master processor is arranged to receive first and second 

new orders, respectively, from the first and second slave 
processors, and to select the first new order according 
to a predefined selection criterion. 

15 23. The apparatus according to claim 19, and comprising 
a memory, wherein the at least one of the master and 
slave processors is arranged to verify the characteristic 
of the model by operating on the OBDD while saving data 
regarding the OBDD in the memory until a predetermined 

20 amount of space in the memory has been consumed, and 

wherein the master processor is arranged to assign 
the new respective variable to each of the slave 
processors and to cause the slave processors to repeat 
the reordering of the rows so as to reduce the amount of 

25 space occupied by the OBDD in the memory due to operating 
on the OBDD to verify the characteristic. 

24. The apparatus according to claim 13, wherein the at 
least one of the master and slave processors is arranged 
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to apply a symbolic model checking program in order to 
verify the model against the specification. 



25. The • apparatus according to claim .13, wherein the 
5 master processor is further arranged to function as one 

of the slave processors. 

26. A computer software product for verification of a 
system design represented by a model that includes a 

10 plurality of variables, the product comprising a 
computer-readable medium in which program instructions 
are stored, which instructions, when read by a group of 
two or more computer processors in mutual communication, 
cause one of the computer processors to serve as a master 

15 processor, and cause one or more of the computer 
processors to serve as slave processors, 

wherein the instructions cause the master processor 
to receive an Ordered Binary Decision Diagram (OBDD) 
representing the model according to an. initial order of 

20 the variables, the OBDD comprising a number of nodes 
arranged in rows corresponding respectively to the 
plurality of the variables, and to assign to each of the 
one or more slave processors a respective variable among 
the plurality of the variables, and 

25 wherein the instructions cause each slave processor 

to reorder the rows of the OBDD by varying a position in 
the OBDD of one of the rows, which corresponds to the 
respective variable that is assigned to the slave 
processor, until at least one of the slave processors 

3 0 identifies a new order for the OBDD, and 
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wherein the instructions further cause at least one 
of the computer processors to verify a characteristic of 
the model against a specification using the new order of 
the OBDD. 

5 

27. The product according to claim 26, wherein the 
instructions cause each of the slave processors to find 
the new order such that the number of the nodes in the 
OBDD is reduced relative to the initial order. 

10 

28. The product according to claim 27, wherein the 
instructions cause at least two of the computer 
processors to serve respectively as first and second 
slave processors, and wherein the instructions cause the 

15 master processor to receive first and second new orders, 
respectively, from the first and second slave processors 
and to select the new order from among the first and 
second new orders so as to minimize the number of the 
nodes in the OBDD. 

20 

29. The product according to claim 26, wherein the 
instructions cause at least two of the computer 
processors to serve as slave processors, and further 
cause the at least two of the processors to reorder the 

25 rows by operating simultaneously on a common set of the 
rows . 

30. The product according to claim 29, wherein the 
instructions cause the at least two of the processors to 
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operate simultaneously on substantially all the rows of 
the OBDD. 

31. The product according to claim 26, wherein the 
5 instructions cause the slave processors to reorder the 

rows by sifting the rows of the OBDD. 

32. The product according to claim 26, wherein the 
instructions cause the master processor to replace the 
initial order with the new order, and to repeat assigning 

10 a new respective variable to each of the slave 
processors, so as to cause the slave processors to repeat 
reordering the rows based on the new order until a 
predefined reordering criterion is satisfied. 

15 33. The product according to claim 32, wherein the 
reordering criterion determines a maximum number of the 
nodes in the BDD. 

34. The product according to claim 32, wherein the 
20 instructions cause at least two of the computer 
processors to serve respectively as first and second 
slave processors, and wherein the instructions cause the 
master processor to receive the new order from the first 
processor, and to communicate the new order to the second 
25 processor for use in repeating the reordering of the 
rows . 
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35. The product according to claim 34, wherein the 
instructions cause the master processor to receive first 
and second new orders, respectively, from the first and 
second slave processors, and to select the first new 

5 order according to a predefined selection criterion. 

36. The product according to claim 32, wherein the 
instructions cause the at least one of the computer 
processors to verify the characteristic of the model by 

10 operating on the OBDD while saving data regarding the 
OBDD in a memory until a predetermined amount of space in 
the memory has been consumed, and 

wherein the instructions further cause the master 
processor to assign the new respective variable to each 

15 of the slave processors and to cause the slave processors 
to repeat the reordering of the rows so as to reduce the 
amount of space occupied by the OBDD in the memory due to 
operating on the OBDD to verify the characteristic. 

20 37. The product according to claim 26, wherein the 

instructions cause the at least one of the computer 
processors is arranged to apply a symbolic model checking 

program in order to verify the model against the 
specification. 

38. The product according to claim 26, wherein the 

instructions further cause the master processor to 
function as one of the slave processors. ' 
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39. A method for modeling a target system, the method 
comprising: 

identifying a plurality of variables that 
characterize the target system and a Boolean function 
5 that is applicable to the variables; 

responsively to the Boolean function, arranging the 
variables in an Ordered Binary Decision Diagram (OBDD) 
according to an initial order of the variables, the OBDD 
comprising a number of nodes arranged in rows 
10 corresponding respectively to the plurality of the 
variables; 

assigning to each processor, among a group of two or 
more computer processors, a respective variable among the 
plurality of the variables; and 
15 using each processor, reordering the rows of the 

OBDD by varying a position in the OBDD of one of the 
rows, which corresponds to the respective variable that 
is assigned to the processor, until at least one of the 
processors identifies a new order for the OBDD. 

20 

40. The method according to claim 39, wherein reordering 
the rows comprises operating simultaneously with at least 
two of the processors on a common set of the rows. 

25 41. The . method according to claim 40, wherein operating 
simultaneously comprises operating on substantially all 
the rows of the OBDD using all of the at- least two of the 
processors . 
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42. The method according to claim 39, and comprising 
replacing the initial order with the new order, and 
repeating the steps of assigning the respective variable 
and reordering the rows based on the new order until a 

5 predefined reordering criterion is satisfied. 

43. The method according to claim 42, wherein the two or 
more computer processors comprise first and second 
processors, and wherein reordering the rows comprises 

10 receiving the new order from the first processor, and 
wherein replacing the initial order comprises 
communicating the new order to the second processor for 
use in repeating the step of reordering the rows. 



15 44. Apparatus for modeling a target system, comprising a 
master processor and one or more slave processors, 

wherein the master processor is arranged to receive 
a model of the target system characterized by a plurality 
of variables and a Boolean function, wherein the model is 

20 represented by an Ordered Binary Decision Diagram (OBDD) 
according to an initial order of the variables, the OBDD 
comprising a number of nodes arranged in rows 
corresponding respectively to the plurality of the 
variables , and 

25 wherein the master processor is arranged to assign 

to each of the one or more slave processors a respective 
variable among the plurality of the variables, and 

wherein each slave processor is arranged to reorder 
the rows of the OBDD by varying a position in the OBDD of 

30 one of the rows, which corresponds to the respective 
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variable that is assigned to the slave processor, until 
at least one of the slave processors identifies a new 
order for the OBDD. 

5 45. The apparatus according to claim 44, wherein the 
slave processors are arranged so that at least two of the 
slave . processors reorder the rows by operating 
simultaneously on a common set of the rows. 

10 46. The apparatus according to claim 45, wherein the at 
least two of the slave processors are arranged to operate 
simultaneously on substantially all the rows of the OBDD. 

47. The apparatus according to claim 44, wherein the 
15 master processor is arranged to replace the initial order 

with the new order, and repeat assigning a new respective 
variable to each of the one or more slave processors, so 
as to cause the slave processors to repeat reordering the 
rows based on the new order until a predefined reordering 
20 criterion is satisfied. 

48. The apparatus according to claim 47, wherein the one 
or more slave processors comprise first and second slave 
processors, and wherein the master processor is arranged 

25 to receive the new order from the first processor, and to 
communicate the new order to the second processor for use 
in repeating the reordering of the rows. 
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49. The apparatus according to claim 44, wherein the 
master processor is further arranged to function as one 
of the slave processors. 

5 50. A computer software product for modeling a target 
system, the product comprising a computer-readable medium 
in which program instructions are stored, which 
instructions, when read by a group of two or more 
computer processors in mutual communication, cause one of 

10 the computer processors to serve as a master processor, 
and cause one or more of the computer processors to serve 
as slave processors, 

wherein the instructions cause the master processor 
to receive a model of the target system characterized by 

15 a plurality of variables and a Boolean function, wherein 
the model is represented by an Ordered Binary Decision 
Diagram (OBDD) according, to an initial order of the 
variables, the OBDD comprising a number of nodes arranged 
in rows corresponding respectively to the plurality of 

20 the variables, and 

wherein the instructions further cause the master 
processor to assign to each of the one or more slave 
processors a respective variable among the plurality of 
the variables, and 

25 wherein the instructions cause each slave processor 

to reorder the rows of the OBDD by varying a position in 
the OBDD of one of the rows, which corresponds to the 
respective variable that is assigned to the slave 
processor, until at least one of the slave processors 

30 identifies a new order for the OBDD, and 



IL920030060US1 



wherein the instructions further cause at least one 
of the computer processors to verify a characteristic of 
the model against a specification using the new order of 
the OBDD. 

5 

51. The product according to . claim 50, wherein the 
instructions cause at least two of the computer 
processors to serve as slave processors, and further 
cause the at least, two of the processors to reorder the 

10 rows by operating simultaneously on a common set of the 
rows . 

52. The product according to claim 51, wherein the 
instructions cause the at least two of the processors to 

15 operate simultaneously on substantially all the rows of 
the OBDD. 

53. The product according to claim 50, wherein the 
instructions cause the master processor to replace the 

20 initial order with the new order, and to repeat assigning 
a new respective variable to each of the slave 
processors, so as to cause the slave processors to repeat 
reordering the rows based on the new order until a 
predefined reordering criterion is satisfied. 

25 

54. The product according to claim 53, wherein the 
instructions cause at least two of the computer 
processors to seirve respectively as first and second 
slave processors, and wherein the instructions cause the 

38 IL920030060US1 



master processor to receive the new order from the first 
processor, and to communicate the. new order to the second 
processor for . use in repeating the reordering of the 
rows. 



39 
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